Setting up Elastic Stack

        sudo add-apt-repository -y ppa:webupd8team/java

You will be prompted to enter a password after running sudo command (unless you are not logged into as root) and you would receive OK on successful addition to repository, which indicates repository has been imported.

        sudo apt-get update

       sudo apt-get -y install oracle-java8-installer

Also during installation, you will be prompted to accept the license agreement which pops up as shown in the following screenshot:

        java -version

http://www.oracle.com/technetwork/java/javase/downloads/index.html

Upon opening the link click on the Download button of JDK to download.

You will be redirected to the download page - first click on the Accept License Agreement radio button, then click on your Windows version (use x86 for 32-bit or x64 for 64-bit) to download the EXE file.

After opening environment variables, click on New (under System Variables) and give the variable name as JAVA_HOME and variable value as C:\Program Files\Java\jdk1.8.0_74. (Do check in your system where jdk has been installed and provide that path):

Then double click Path variable (under System Variables) and move towards the end of the text box - insert a semi colon if not inserted and add the location of the bin folder of JDK such as: %JAVA_HOME%\bin. Then click on OK to all the windows opened.

java -version

The preceding screenshot signifies Java has installed successfully.

        wget https://artifacts.elastic.co
        /downloads/elasticsearch/elasticsearch-5.1.1.deb

        sudo dpkg -i elasticsearch-5.1.1.deb

        sudo update-rc.d elasticsearch defaults 9510

The preceding command will print on screen:

        Adding system startup for,  /etc/init.d/elasticsearch

Check status of Elasticsearch using following command:

       sudo service elasticsearch status

Run Elasticsearch as a service using following command:

         sudo service elasticsearch start

Usage of Elasticsearch command:

       sudo  service elasticsearch {start|stop|restart|force-reload|status}

If you are using systemd distribution, then run following command:

        sudo /bin/systemctl daemon-reload
        sudo /bin/systemctl enable elasticsearch.service

To verify elasticsearch installation open open http://localhost:9200 in browser or run the following command from command line:

       curl -X GET http://localhost:9200

https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.1.1.zip

Upon opening the link, click on it and it will download the ZIP package.

This will extract the files and folders in the directory.

     uname -m

If it gives an output as x86_64 it means it is 64-bit system else, if it gives i686 it means it is a 32-bit system.

      sudo update-rc.d kibana defaults 9510

The above command will print on screen:

      Adding system startup for /etc/init.d/kibana

Check status of Kibana using following command:

      sudo service kibana status

Run Kibana as a service using following command:

      sudo service kibana start

Usage of Kibana command:

      sudo service kibana {start|force-start|stop|force-stop|status|restart}

If you are using systemd distribution then run following command:

        sudo /bin/systemctl daemon-reload
        sudo /bin/systemctl enable kibana.service

https://artifacts.elastic.co/downloads/kibana/kibana-5.1.1-windows-x86.zip

Upon opening the link, click on it and it will download the ZIP package.

        wget https://artifacts.elastic.co
        /downloads/logstash/logstash-5.1.1.deb

       sudo dpkg -i logstash-5.1.1.deb

     sudo initcl status logstash

Run Logstash as a service using following command:

        sudo initctl start logstash

https://artifacts.elastic.co/downloads/logstash/logstash-5.1.1.zip

Upon opening the link click it to download the ZIP package.

This will extract the files and folders in the directory.

logstash --version

This will print the Logstash version installed.

         uname -m

If it gives an output as x86_64 it means it is 64-bit system else, if it gives i686 it means it is a 32-bit system.

        sudo update-rc.d filebeat defaults 95 10

The above command will print on screen:

        Adding system startup for /etc/init.d/filebeat.

Check status of Filebeat using following command:

        sudo service filebeat status

Run Filebeat as a service using following command:

       sudo service filebeat start

Usage of Filebeat command:

        sudo service filebeat {start|stop|status|restart|force-reload}

        wmic os get osarchitecture

It will give an output as 64-bit or 32-bit.

Upon opening the link, click on it and it will download the ZIP package.

This will extract the files and folders in the directory.

.\install-service-filebeat.ps1

This will install Filebeat as a Windows service.